SSL: Import PFX Certificate

In this guide, we'll go through the process of importing PFX SSL certificate into EveryonePrint consisting of a PKCS key pair.

I. - Create a new KeyStore

1. Open Keystore Explorer and click Create a new KeyStore
   
   
2. Select New KeyStore Type:  JKS
   
   
3. Choose to first Import Key Pair
   
   
4. Choose the Import Key Pair Type: PKCS #12
   
   
5. Browse and select your original .pfx Key Pair and enter the associated Decryption Password.
   
6. You will be prompted to create a New Key Pair Entry Password of your choice (this is used later when adding keystore to EveryonePrint):
   
7. The importation should be done:
   
8. You now have to save the keystore. Click on the icon disk:
   
9. You have to set a Keystore Password. In this example, the password "mysecret" was chosen for both Keypair and Keystore password.
   
10. Save the keystore file to the EveryonePrint etc folder, by default in:
    • <EOP install dir>\etc
      
      

II. - Apply new KeyStore:

1. Open <EOP install dir>\etc directory
2. Make a backup copy of the files called jetty-ssl.xml and jetty-ssl-terminalapi.xml
3. Open both files with a text editor like Notepad
4. Change the keystore entries to use the new keystore file, and enter passwords in 3 places
5. While we're here, we can also change from the default 9443 port to standard HTTPS port 443, so end users can enter a URL in their browser without specifying the port.

   Warning: before doing this change, make sure that no other application (for example IIS server) is already using this port:

   • Open a command window and type: netstat -ano -p tcp
   • Look for:443 in the "Local Address" column
   • If this port is already in use, you may keep port 9443 and provide end users with the complete URL: https://<everyoneprint-server>:9443
     
     
6. Save the xml file and restart EveryonePrint Web Service, and now you should be able to confirm the working certificate in the browser.
   
   

Troubleshooting:

• If the Web interface is inaccessible, any Web server related errors are logged to the file: 
  • <EOP install dir>\logs\eopwebservice.log
• Check this log file for any error.
• In doubt contact our Customer Support Center and provide the whole eopwebservice.log file.